CVE-2026-2147

5.5 mediumEPSS 0.6%

Medium (5.5) in tenda ac21 firmware. EPSS 0.6% chance of exploitation in the next 30 days.

A weakness has been identified in Tenda AC21 16.03.08.16. This impacts an unknown function of the file /cgi-bin/DownloadLog of the component Web Management Interface. Executing a manipulation can lead to information disclosure. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.

Severity

CVSS 4.0

5.5 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 48% of CVEs (scores of 2026-10-31)
CWEs: CWE-200, CWE-284
Published: 2026-02-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

tenda:ac21_firmware

References

https://github.com/master-abc/cve/issues/30
https://vuldb.com/?ctiid.344849
https://vuldb.com/?id.344849
https://vuldb.com/?submit.747429
https://www.tenda.com.cn/

Check your stack JSON